Описание
Cross-site scripting (XSS) vulnerability in the file-upload interface in Cisco Identity Services Engine (ISE) allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename, aka Bug ID CSCui67495.
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:a:cisco:identity_services_engine_software:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:identity_services_engine:-:*:*:*:*:*:*:*
EPSS
Процентиль: 40%
0.00185
Низкий
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
больше 3 лет назад
Cross-site scripting (XSS) vulnerability in the file-upload interface in Cisco Identity Services Engine (ISE) allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename, aka Bug ID CSCui67495.
EPSS
Процентиль: 40%
0.00185
Низкий
3.5 Low
CVSS2
Дефекты
CWE-79